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IN THE CLAIMS: 

1-16. (Cancelled) 

17. (Currently Amended) A file decryption apparatus that decrypts a ciphertext, the 
file decryption apparatus comprising: 

a memory unit for storing an encrypted key, a ciphertoxt, and an encrypted file 
key, the encrypted key being generated by encrypting origjggi key info rm a ti on stored in a 
portable key storage medium using a first password inputted b v a user , the encrypted file key 
being generated by encrypting [[a]] fin original file key using the original key information, and 
the crphertext being generated by encrypting a plaintext using the gnsksl file key; 
a switch unit 

(a) including a first key obtaining unit operable to receive an input of a 
second password from the user and decrypt the encrypted key stored in the memory unit using 
the received second password to generate decryp ted key information, and a second key obtaining 
unit operable to read the original key information from the key storage medium loaded in the file 
decryption apparatus, and 

(b) is operable to obtain either the original key information or tfo dfiCTYPftd 
kev information by one of the first key obtaining unit and the second key obtaining unit; and 

a decryption unit operable to decrypt the encrypted file key using ttio obtain e d k e y 
g rfbrmatioH «ther the o b tained original kev information or the Obtained dgCTTPtgd lf£Y 
information to generate a decrypted file kev. and decrypt the ciphertext using the decrypted file 
key to generate a decrypted text 
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18-56. (Cancelled) 

57, (Previously Presented) The file decryption apparatus of Claim 17, wherein 

the memory unit further stores, in association with the encrypted key, a user 
identifier that identifies a user, and 

the first key obtaining unit further receives an input of the user identifier from the 
user and decrypts the encrypted key that is associated with the user identifier. 

58, (Currently Amended) The file decryption apparatus of Claim 17, wherein 
flic memory unit further stores, in association with the encrypted 

authentication information generated based on the ajo^^keyin^OTnation, and 

the first key obtaining unit checks, using the authentication information* whether 
the encrypted key has been altered or not, when the encrypted key that is associated wife (he 
authentication information is decrypted. 

59, {Previously Presented) The file decryption apparatus of Claim 17, wherein 
the memory unit is a portable storage medium, and 

the first key obtaining unit decrypts the encrypted key that has been written to the 
memory unit that is the portable storage medium. 

60- (Previously Presented) The file decryption apparatus of Claim 17, wherein 

the memory unit further stoics the encrypted key in association with the ciphertcxt 

and the encrypted file key, and 

the first key obtaining unit decrypts the encrypted key that is associated with the 

ciphertext and the encrypted file key. 
iw7Mi«ftnacBJ^iKv«45ni 3 
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61 . (Previously Presented) The file decryption apparatus of Claim 17, wherein 

the memory unit further stores, in association with the ciphertext, authentication 
information generated based on die ciphertext, and 

the decryption unit checks, using the authentication information, whether the 
ciphertext has been altered or not, when the ciphertext that is associated with the authentication 
information is decrypted. 

62. (Currently Amended) A file management apparatus that encrypts a plaintext to 
generate a ciphertext, stores the ciphertext, and decrypts die ciphertext, the file management 
apparatus comprising: 

a memory unit; 

a registration unit operable to receive an input of a ficst password from a user, 
generating an encrypted key by encrypting original kev information, which is stored in a portable 
key storage medium, using the received fiat password, and writing the generated encrypted key 
to the memory unit; 

an encryption unit operable to generate a ciphertext by encrypting a plaintext 
using [[a]] *n flripfaai file key, generate an encrypted file key by encrypting the anginal file key 
using the key information stored in the key storage medium, and write (he generated ciphertext 
and encrypted file key to the memory unit in association with each other; 

a switch unit 

(a) including a Bret key obtaining unit operable to receive an input of [[the]] a 
second password fam fee user and decrypt the encrypted key in tfte memory mriz using the 
received second password to generate decrypted key information, and a second key obtaining 
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unit operable to read the key infomiafion from the key storage medium loaded in the file 
management apparatus, and 

(h) operable to obtain either the prisma! key information or th^ decrypted fey 
information by one of the first key obtaining unit and the second key obtaining unit; and 

a decryption unit operable to decrypt the encrypted file key wing flic o b tain e d toy 
information either the o fr t flffl f 1 «rfpittal frev information or the obtained decrypted kfflf 
jpfottnation to generate a decrypted file key. and decrypt the ciphertext using the decrypted file 
key to generate a decrypted text 

63. (Currently Amended) The file management apparatus of Claim 62, 

wherein file registration unit further receives an input of a frst user identifier that 
identifies a user, and writes the first user identifier in association with the encrypted key, to the 
memory unit, and 

the first key obtaining unit further receives an input of [[the]} a secpnfl user 
identifier and decrypts the encrypted key that is associated with the TOWIY^ gyred user 
identifier. 

64. (Currently Amended) The file management apparatus of Claim 62, 
wherein the registration unit further writes 

authentication information, which is generated based on the oriffmal key 
information, to the memory unit in association with the encrypted key, 

the first key obtaining unit ftorther checks, using the authentication inforrnatiari* 
whether the encrypted key has been altered or not, when the encrypted key that is associated with 
the authentication information is decrypted 
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65. (Previously Presented) The file management apparatus of Claim 62, 

wherein flic encryption unit fiutfcer writes authentication information, which is 

generated based cm the ciphexteact, to the memory unit in association wt& the ciphsrtext, 

fro decryption unit flutter checks, using the authentication information, whether 

the ciphertext haB been altered or not, when the ciphertart that is associated with the 

authentication information is decrypted. 

66- (Previously Presented) The file management apparatus of Claim 62, 

therein die memory unit is a portable storage medium, the registration unit writes 

the encrypted key to the memory unit being a portable storage medium, and 

the first key obtaining xrah decrypts the encrypted key in the memory unit being a 

portable storage medium 

67. (Previously Presented) Hie file management apparatus of Claim 62 further 
comprising 

a deletion unit operable to delete the encrypted key that has been written to the 

memory unit 

68, (Currently Amended) The file management apparatus of Claim 62 farther 
comprising 

a deletion unit operable to delete the encrypted key that has been written to the 

memory unit, 

wherein the registration unit further receives an input of a new password from the 
n aer r encrypts the original key information which is stored m the key storage mfidttffll using the 

tfM7$^(0«PWCH7MRW*4532I 6 
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new passwori to generate a new encrypted key, and writes the generated new encrypted key to 
the memory tmit. 

69. (Currently Amended) The file management apparatus of Claim 62, 

wherein the key storage medium stores new key information, instead of the 

ftrigiflftl key information, 

the registration unit receives [[the]] & input of [[the]] attttri password frgm a 
user and decrypts the encrypted key using the rtxaveA thind password to generate key 
information, 

the ^irrvptinn writ tndudea a dec r yption sub-unit dewpte causgs ftg dw^ygfen 
siA-tmft to decrypt the encrypted file key using the old key infbnnstkm to generate a ggnyativg 
file key, encrypts the generative file key using the new key information wfafck fftaKfl ifl ft» 
W ff Tftfflff ? r T^" 1 ™- to generate a new encrypted file key, and writes die new encrypted file key 
over the encrypted file key in the memory unit, and 

the registration unit encrypts the new key information using the thiol password to 
generate a new encrypted key and writes the new encrypted key over the encrypted key in the 
memory unit 

70* {Currently Amended) The file management apparatus of Claim 69, 

wherein die registration unit fUrfher receives an input of a user identifier that 
identifies a user, 

the encryption urril further writes the user identifier in association with too 
ciphertext and the encrypted file key, to the memory unit, and 
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the encryption unit retrieves the encrypted file key that is associated with the user 
identifier in the memory unit and generates [[aj] ftg gynenttiyfi file key from the retrieved 
encrypted file key. 

71. (Currently Amended) The file management apparatus of Claim 69, 

wherein the encryption unit farther writes encryption information in association 
with the ciphertext and the encrypted file key, to the memory unit, the encryption information 
indicating that the plaintext has beat encrypted, and 

the encryption writ retrieves the encrypted file key that is associated with the 
encryption information in the memory unit, and generates [[a]] thegcaflfltivj file key from the 
retrieved encrypted file key. 

72. (Currently Amended) The file management apparatus of Claim 69, 

wherein the registration unit further receives an input of a user identifier that 
identifies a user, 

the encryption unit further writes the user identifier in association with a file 
identifier that identifies the ciphertext and the encrypted file key, as a unified file, to the memory 
unit, and 

the encryption unit extracts the file identifier thai is associated with the user 
identifier fiom the unified file, specifies the encrypted file key identified by the extracted file 
identifier, and generates [[a]] the generative file key fiom the specified encrypted file key. 
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73. (Currently Amended) The file management apparatus of Claim 69, 

wherein the encryption unit further writes encryption information in association 
with a file identifier that identifies the ciphertext and the encrypted file key, as a unified file, to 
the memory unit, the encryption information indicating that the plaintext has been encrypted, and 

the encryption unit extracts the file identifier that is associated with the encryption 
information ftom the unified file specifies the encrypted file key identified by the extracted file 
identifier, and generates [[a]] j fre generative file key ftom the specified encrypted file key. 

74. (Previously Presented) The file management apparatus of Claim 62, 

wherein Are encryption unit further writes the encrypted key in association with 
the ciphertext and the encrypted file key, to the memory unit, and 

the firct key obtaining unit decrypts the encrypted key that is associated with the 
ciphertext and the encrypted file key. 

75. (Previously Presented) The file management apparatus of Claim 74, 

wherein the encryption unit further receives an input of an indication, the 
indication showing whether the encrypted key and the ciphertext are to be written in association 
with each other to the memory unit, and writes, when the indication shows that the encrypted key 
and the ciphertext art to be written in association with each other, the encrypted key in 
association with the ciphertext, to the memory unit 

76* (Cancelled) 
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